Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/787163-e36a-4d21-940e-daf288c935f2/1/wyXvjpcMwIuMKt-PY8nB7QIHFmQ.mft
File:                     wyXvjpcMwIuMKt-PY8nB7QIHFmQ.mft (raw, json)
Hash identifier:          pWTieonuCjW1zIALHVAD8IcO67+vVx8JQeWR4GeD/mI=
Subject key identifier:   B7:26:1E:BF:6D:A3:17:32:92:AC:FC:49:C5:D7:B0:3C:5B:47:5D:50
Authority key identifier: C3:25:EF:8E:97:0C:C0:8B:8C:2A:DF:8F:63:C9:C1:ED:02:07:16:64
Certificate issuer:       /CN=c325ef8e970cc08b8c2adf8f63c9c1ed02071664
Certificate serial:       01992330D4B2D5734AC8575CDA7764798D21
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wyXvjpcMwIuMKt-PY8nB7QIHFmQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/787163-e36a-4d21-940e-daf288c935f2/1/wyXvjpcMwIuMKt-PY8nB7QIHFmQ.mft
Manifest number:          58
Signing time:             Sun 07 Sep 2025 08:00:26 +0000
Manifest this update:     Sun 07 Sep 2025 08:00:26 +0000
Manifest next update:     Mon 08 Sep 2025 08:00:26 +0000
Files and hashes:         1: wyXvjpcMwIuMKt-PY8nB7QIHFmQ.crl (hash: 1IRYmbZIitwvh4UDTO4PPQhW5bCHqRH1+C2lu3NDCCg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/787163-e36a-4d21-940e-daf288c935f2/1/wyXvjpcMwIuMKt-PY8nB7QIHFmQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/787163-e36a-4d21-940e-daf288c935f2/1/wyXvjpcMwIuMKt-PY8nB7QIHFmQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wyXvjpcMwIuMKt-PY8nB7QIHFmQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 07:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:23:30:d4:b2:d5:73:4a:c8:57:5c:da:77:64:79:8d:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c325ef8e970cc08b8c2adf8f63c9c1ed02071664
        Validity
            Not Before: Sep  7 08:00:26 2025 GMT
            Not After : Sep  8 08:00:26 2025 GMT
        Subject: CN=b7261ebf6da3173292acfc49c5d7b03c5b475d50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:0d:d6:66:3e:bf:60:91:49:dc:bc:69:f9:31:
                    09:73:90:92:2f:82:1c:c9:c3:8a:1f:b0:e4:e9:99:
                    df:b4:47:44:4d:75:c7:bb:f6:10:31:c3:dc:9b:b9:
                    0b:7f:a4:a5:7b:e8:6e:b0:c8:ef:98:16:33:d1:30:
                    ec:e5:29:1c:88:03:42:89:b1:15:8f:0f:93:f0:ec:
                    0c:bd:e7:7a:21:e9:d6:17:44:52:dc:e4:7e:32:22:
                    f3:e4:54:8a:36:58:03:c1:b3:3f:94:83:dd:9f:04:
                    0c:8f:9f:03:4c:ec:5e:8d:b2:50:7e:88:11:cc:7d:
                    1d:26:05:32:10:06:8c:15:ab:13:5c:f9:b4:c7:f8:
                    56:eb:b0:c3:3c:2f:63:75:65:72:32:0d:b8:9c:33:
                    a3:95:b4:0e:36:2c:cc:3d:82:e7:cb:9d:57:af:ed:
                    cd:89:c9:70:42:f5:2a:16:10:dc:be:cd:40:e9:fb:
                    2b:e8:ae:bc:fe:82:4f:31:a9:b7:8c:18:16:b8:be:
                    0c:b7:3d:5a:3c:81:64:b7:06:51:33:df:34:e7:70:
                    04:11:2c:72:a2:5d:5e:5e:bf:ec:f6:27:72:b6:15:
                    46:07:40:4f:55:78:b6:f7:c3:c3:4d:57:03:cf:59:
                    1b:55:90:ed:af:21:fb:96:ce:19:8c:4c:25:d2:5e:
                    d6:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:26:1E:BF:6D:A3:17:32:92:AC:FC:49:C5:D7:B0:3C:5B:47:5D:50
            X509v3 Authority Key Identifier:
                keyid:C3:25:EF:8E:97:0C:C0:8B:8C:2A:DF:8F:63:C9:C1:ED:02:07:16:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wyXvjpcMwIuMKt-PY8nB7QIHFmQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/787163-e36a-4d21-940e-daf288c935f2/1/wyXvjpcMwIuMKt-PY8nB7QIHFmQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/787163-e36a-4d21-940e-daf288c935f2/1/wyXvjpcMwIuMKt-PY8nB7QIHFmQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:0d:0b:ea:d7:63:14:2b:80:76:fe:c0:b8:2a:5b:7d:8b:38:
         70:12:8c:d4:ec:8e:3b:32:f2:4a:ab:6a:62:b0:af:d5:81:c2:
         83:af:df:32:b6:1a:a3:44:a7:d6:c5:84:b3:7a:fd:9f:b4:3d:
         25:80:09:f5:a7:6c:e5:96:a5:b3:09:49:6e:68:4e:35:35:0c:
         7f:a6:ee:08:01:fd:af:98:a8:b8:09:0d:b2:63:5f:65:36:0e:
         e5:ee:d7:5a:3a:d5:26:f7:0b:36:7b:b1:50:4e:e6:d7:28:a5:
         10:72:34:63:c3:d5:00:ae:ff:31:3f:67:89:c4:2c:2d:01:19:
         c0:a2:39:67:16:d5:71:b3:e1:51:a3:cb:b3:2b:ca:a8:1d:dd:
         2e:46:df:8f:a1:a3:03:5f:b4:09:db:80:84:b9:4d:b9:b8:0c:
         ca:98:63:61:38:d9:a0:ba:76:aa:c9:02:a0:9b:3e:45:19:8c:
         21:39:3f:70:ce:29:a3:e1:2a:43:62:9d:a5:dc:c2:ed:57:99:
         71:a5:73:75:ed:ad:80:f6:05:12:f1:12:f4:3e:62:d0:c0:cd:
         7d:49:38:fa:f5:f1:98:93:72:06:7b:5a:c8:3a:c9:69:a1:43:
         34:4b:87:89:89:ee:84:53:b5:1c:1f:3e:9c:12:a3:8d:ce:38:
         0c:da:58:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:51:44 2025 by rpki-client